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Abstract 

We discuss excess noise contributions of a practical balanced homodyne detector in Gaussian- 
modulated coherent-state (GMCS) quantum key distribution (QKD). We point out the key gener- 
ated from the original realistic model of GMCS QKD may not be secure. In our refined realistic 
model, we take into account excess noise due to the finite bandwidth of the homodyne detector 
and the fluctuation of the local oscillator. A high speed balanced homodyne detector suitable for 
GMCS QKD in the telecommunication wavelength region is built and experimentally tested. The 
3 dB bandwidth of the balanced homodyne detector is found to be 104 MHz and its electronic 
noise level is 13 dB below the shot noise at a local oscillator level of 8.5x10^ photon per pulse. 

The secure key rate of a GMCS QKD experiment with this homodyne detector is expected to 
reach Mbits/s over a few kilometers. 
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I. INTRODUCTION 



Quantum key distribution (QKD) based on Gaussian-modulated coherent-state (GMCS) 
protocol has attracted a lot of attention l|-l7|. Comparing with the BB84 QKD, the GMCS 
QKD presents several advantages. The coherent state required by GMCS QKD can be 
produced easily by a practical laser source, while the perfect single photon source required by 
3B84 QKD is hard to obtain. Although improved BB84 protocols (such as decoy protocols 
SMllj) are compatible with coherent laser sources, they do require single photon detectors. 



which are expensive and have low efficiency. The homodyne detector in the GMCS QKD, on 
the other hand, can be constructed us,ng h.gh efficency PIN photodiodes g The GMCS 

QKD also has an advantage of transmitting multiple bits per symbol [1|, |12[ . The security of 
the GMCS QKD was first proven against individual attacks with direct [isl or reverse 

m 

reconciliation schemes. Security proofs were then given against general individual attacks 

ISMlTj. To date, three groups have independently claimed 



14i | and general collective attacks 



that they have proved the unconditional security of GMCS QKD 181420 1. 



Fiber-based GMCS QKD systems over a practical distance are challenging and only a few 
groups have demonstrated QKD experiments over tens of kilometers ^, Q, 21, 22|. Current 
repetition rates used in those GMCS QKD experiments are below 1 MHz, which in turn, 
makes the GMCS QKD less competitive than the single photon BB84 QKD operating at 
GHz repetition rates 2J, |25|. The repetition rate of GMCS QKD is limited by a few factors: 



(1) the speed of the homodyne detector [6|]; (2) the speed of the data acquisition system; and 
(3) the speed of the classical data processing algorithm jsl . The speed of date acquisition and 
classical data processing can be increased by hardware engineering and are not fundamental 
limits in GMCS QKD. In this work, we mostly focus on increasing the homodyne detector 
speed and analyzing various excess noise contributions introduced by a practical homodyne 
detector. 

The balanced homodyne detection used in quantum measurement, proposed by Yuen and 
plays an important role in quantum optics |27H29| and quantum cryptography 
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23| . In a balanced homodyne detector (BHD), the signal to be measured 



is mixed with a local oscillator (LO) at a beam splitter. The interference signals from the 
two output ports of the beam splitter are sent to two photodiodes followed by a subtraction 
operation, and then, amplification may be applied. The output of a BHD can be made to be 
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proportional to either the amphtude quadrature or the phase quadrature of the input signal 
depending on the relative phase between the signal and the LO. The output of the BHD can 
be captured in either frequency {s^ or time domains 3l|-34|- For GMCS QKD, measurement 
in the time domain that is capable of resolving each individual pulse (representing a weak 
coherent state) is required in order to extract random key information This pulse- 
resolving requirement demands that the bandwidth of the detection system be significantly 
higher than the repetition rate of the QKD operation, which highlights the importance of 
developing high bandwidth BHDs. 

In this paper, we develop a broadband BHD suitable for GMCS QKD operating at a rep- 
etition rate of tens of MHz. To predict its performance in GMCS QKD, we first analyze the 
excess noise contributed by this practical BHD. In the GMCS QKD, excess noise is defined 
in units of shot noise and includes all noises due to system imperfections and eavesdropping, 
which are above and beyond the vacuum noise associated with channel loss and losses in 
Bob's system. It determines the maximum amount of information that could be obtained by 
Eve. In the original realistic model proposed in previous GMCS QKD literature fly, 
the excess noise contributed by a BHD is the electronic noise of the BHD. This model does 
not consider the excess noise that originates from other imperfections in a practical BHD 
and is not conservative enough in estimating the information possibly be leaked to Eve. In 
this paper, we refine the original realistic model which has been widely adopted to calculate 
key rates for practical GMCS QKD systems and identify two new noise sources of a prac- 
tical homodyne detector: (1) the excess noise caused by the BHD electrical pulse overlap 
at the BHD output; and (2) the excess noise caused by LO fluctuation. Under the refined 
realistic model, we quantify the various excess noise contributions from the broadband BHD 
we constructed. Based on our simulation using the experimentally determined excess noise 
of the BHD, secure GMCS QKD key rates using this BHD is predicted to reach Mbits/s 
over a few kilometers. 

This paper is organized as follows: In Section II, we revisit GMCS QKD protocol, identify 
two new excess noise sources, and introduce the key generation rate formulas based on the 
refined realistic model. In Section HI, we analyze the excess noise contribution of a practical 
BHD. In Section IV, we discuss practical issues in building a high speed BHD, including 
different temporal responses of two photodiodes, appropriate pulse duration, and the BHD 
linearity and the construction of a high speed HD in GMCS QKD. In Section V, we will 
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report the performance of the BHD and predict the key rates by simulation. 



II. GAUSSIAN-MODULATED COHERENT-STATE PROTOCOL 

The basic GMCS QKD protocol is as follows: Alice generates two random sets of contin- 
uous variables x and p with a Gaussian distribution that has a zero average. Alice encodes 
random bits (key information) by modulating the amplitude quadrature (x) and the phase 
quadrature (p) of weak coherent states \x + ip) (typically less than 100 photons in each pulse) 
with her Gaussian-distributed random variable sets {x,p}. On the receiver's side, Bob mea- 
sures either x or p quadrature of the weak coherent states randomly by using homodyne 
detection. By repeating this procedure multiple times, Alice shares a set of correlated Gaus- 
sian variables (called the "raw key") with Bob. By comparing a random sample of their raw 
key, they can evaluate parameters of QKD and upper bound on Eve's information. Finally, 
they can generate secure key by performing reconciliation. 

In the presence of individual attacks, one can estimate the information leaked to Eve 
from the amount of excess noise quadrature noise observed by Bob in excess of standard 
quantum limit The most conservative estimation (the general model) assumes all the 
excess noise is introduced by eavesdropping, whereas the original realistic model assumes 
that Eve cannot control the LO or take advantage of the excess noise generated within Bob's 
system In the original realistic model, the excess noise has several contributions: (1) 
noise due to imperfection outside Bob's system is denoted as Ea- This part of noise can be 
controlled by Eve; (2) noise from Bob's system that is uncontrollable by Eve, called Nsnb- In 



Refs 



15|], the latter refers to the homodyne detector noise (Nhom), while in Refs. |6l. |21|. 
it consists both homodyne detector noise {Nhom) and the noise associated with the photon 
leakage from the LO to the signal (Nieak)- In previous papers 0,1^, 15, 21|, Nhom is regarded 



to consist of only the electronic noise (i.e. Nhom = -^eie)- In this paper, we refine this realistic 
model and consider other imperfections of a practical BHD, and conclude that excess noise 
caused by a practical BHD (Nhom) could be divided into three parts: (1) electronic noise 
(Neie), (2) noise introduced by electrical pulse overlap due to finite response time of the 
BHD {Eoveriap) and (3) noise due to local oscillator fluctuation in the presence of incomplete 
subtraction of a BHD {Nlq)- 



In Ref. 



40|, the need to monitor the intensity of the LO for security proofs in discrete 
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QKD protocol embedded in continuous variables has been discussed. In GMCS QKD ex- 
periment, Alice and Bob can monitor LO, and discard pulses with large intensity changes 
in LO. However, there is always a small measurement error due to imperfect measurement 
instrument. Therefore, it is reasonable to assume there is a small amount of LO fluctuation 
that Eve can take advantage of. Therefore, in this refined realistic model, Coveriap and N^o 
generated by a BHD, as well as Nieak associated with leakage LO photons, are all considered 
controllable by Eve. Nlo is caused by imperfect subtraction of BHD in the presence of LO 
intensity fluctuation while Ni^ak is due to the interference between leakage photons and LO 
photons. 

Following an approach similar to that in jl|, we will now present the GMCS QKD key 
rate formulas based on refined realistic model. The mutual information between Alice and 
Bob Iab is determined by the Shannon entropy jsSj. According to Refs. 

/^B = ^log2[(V + x)/(l + x)], (1) 

where 

1 - VG 

X = Xvac + e = -^jQ— + ^- (2) 
In Eq. ([1]), y = + 1 is the quadrature variance of the coherent state prepared by Alice 
(1 is the shot noise of a coherent state) and Va is Alice's modulation variance (variance 
of X or p quadrature modulated by Alice). In Eqs. ([T]) and ([2]), x is the equivalent noise 
measured at the input, which is composed of "vacuum noise" Xvac (noise associated with the 
channel loss and detection efficiency of Bob's system) and "excess noise" e (noise due to the 
imperfections in a non-ideal QKD system). G is the channel efficiency (transmission), and 
rj is the total efficiency of Bob's device (optical loss and detector efficiency). 

We will now discuss the key rate formulas for the case of the refined realistic model, 
which we defined earlier in this Section. Under the refined realistic model, noise that can 
in principle be controlled by Eve (ee) includes (1) Ea due to imperfections outside Bob's 
system; (2) Eoveriap introduced by electrical pulse overlap due to finite response time of the 
BHD; (3) Nlo due to LO fluctuations in the presence of incomplete subtraction of a BHD 
and (4) Nieak associated with the leakage from LO to signal. Excess noise that is out of 
Eve's control [Nsob) is electronic noise from the homodyne detector (Nf^ie). Therefore, the 
total excess noise e can be written as |l| 

E = ee + NBob/vG, (3) 



where Se = eA + e overlap + NiohG + Nieak/vG and Nsob = N^ie- sa and Soveriap are referring 
to the input. Nlq^ Nieak and Neie are defined from the output and need to be divided by rjG 
when we convert them to the input. Figure [T] summarizes the various noise terms considered 
in the original realistic model and the refined realistic model. Ni^ak is mostly determined by 
the design of the QKD system rather than by the BHD. Since our main goal is to study the 
excess noises contributed by the BHD, we simply assume Nieak = in this paper. 

Original realistic model Refined realistic model 

V ,V 

i V hom 

I r ^ 

e = e_,+ IitG e = e^+ N,„^ I tjG + e„,„,,„, + //G + N^,^ I /;G 

/ N ' V ' f 

Controlled Not controlled Controlled Not controlled 

by Eve by Eve by Eve by Eve 



FIG. 1: Various noise terms in the original realistic model and the refined realistic model. 
From Eqs. ([2]) and ([3]), the equivalent input noise is 

With a reverse reconciliation scheme, the mutual information shared by Bob and Eve 
under the refined realistic model is 

" 2 -G + GeE + GV-^) + l-r, + Nj- 

If a reverse reconciliation algorithm [Ij is adopted, the secure key rate is 

A/ = (5Iab - Ibe. (6) 



where /3 is the reconciliation efficiency (/? < 1). In real QKD systems, /3 is 0.9 in Ref. 



22 



and 0.898 in Ref. 



15|. If the laser repetition rate of QKD experiment is R Hz, the secure 



key per second can be written by 

^Isecond = iPlAB ' Ibe) X R. (7) 



III. EXCESS NOISE CONTRIBUTED BY THE BHD IN A GMCS QKD 

As previously stated, excess noise represents the amount of information that could pos- 
sibly be leaked to Eve in a GMCS QKD system and is important in estimating the amount 
of secure information. 
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In this section, we will evaluate various sources of the excess noise for a practical BHD. 



A. BHD electronic noise 



Electronic noise Neie of a BHD is mainly contributed by thermal noise of electronic 



components and amplifier noise 



36|. Since shot noise scales with LO power and electronic 



noise is independent of the LO power 37|], by measuring the BHD noise as a function of the 
LO power when vacuum is sent to the signal port, we can quantify the electronic noise in 
units of shot noise. Electronics noise in a BHD has been discussed in 



B. Excess noise due to electrical pulse overlap 

Ideally, the secure key rate of a GMCS QKD system is proportional to its operation 
rate. However, in practice, the BHD has a finite bandwidth. As the laser pulse repetition 
rate approaches the bandwidth of the BHD, we will expect a non-negligible overlap between 
adjacent electrical pulses at the output of the BHD. If the electrical pulses have overlap 
in the time domain, the measured quadrature value contains contributions from adjacent 
pulses. 

We will estimate the amount of excess noise contributed by the electrical pulse overlap. 
The exact relation between the electrical pulse width r and the BHD bandwidth B depends 
on the electrical pulse shape. We have experimentally found that the relation r ~ 1/5 
applicable to our homodyne detector. In this case, we can estimate the overlap by writing 
the following functions for two consecutive pulses: (a) e^^*^^/^^^/^"^^ and (b) e~*^/^^^, where 
R is the laser repetition rate and r is the Gaussian pulse width. If the quadrature value 
is determined by the peak of the measured electrical pulse, the contribution of pulse (a) to 
pulse (b) is . Since each pulse has two adjacent pulses, the excess noise contributed by 
electrical pulses overlap (referring to the input) is 

Soverlap = 2V X {e~^f = 2(^4 + 1) X e'^ . (8) 

where Va is Alice's modulation. We remark that the excess noise due to the overlapping 



between adjacent pulses could be further reduced by deconvolution [34 1. 

By decreasing this repetition rate, we can reduce the excess noise caused by overlap. 
However, the GMCS QKD key rate per second will be reduced too. In Fig. [21 we simulate 



the GMCS QKD key rate per second as a function of the repetition rate using Eqs. ([I]), ([5]), 
and ([7]) . With a BHD bandwidth of 100 MHz, the optimal pulse repetition rate is around 
36 MHz. At repetition rates beyond ~ 46 MHz, there will not be any secure key generated. 
At low repetition rate, the excess noise due to electrical pulse overlap is negligible compared 
to other excess noise contribution {ea), and the key rate per second is almost proportional 
to the repetition rate. As the repetition rate is increased beyond a critical point, the excess 
noise due to overlap is dominant and the key rate drops quickly with the repetition rate. 
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FIG. 2: GMCS QKD secure key generation rate as a function of the laser repetition rate under 
the refined realistic model The bandwidth of the BHD is 100 MHz. The simulation parameters 

n 

are from Ref. [6], Va = 16.9, G = 0.758, r] = 0.44, ea = 0.056, N^ie = 0.045, and /3=0.898. In this 
simulation, Nlo = Nieak = 0. 



C. Excess noise contributed by LO fluctuations 

One of the advantages of BHD is that ideally the fluctuations of LO will be canceled after 
the subtraction. However, in a practical BHD, the positive and negative pulses cannot be 
canceled completely due to several reasons, such as different quantum efficiencies of the two 
photodiodes, different temporal responses of the photodiodes and the subsequent electronic 
amplifiers, or different optical intensities of the two balanced beams. The difference can be 
partially compensated, for example, by adjusting the losses and the relative delay of the two 
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balanced arms, however, it cannot be completely canceled out. The remaining difference 
also varies with LO power. The consequence is that the ffuctuation of the LO power will 
contribute to the excess noise. 

The quadrature measurement corresponds to the time integrated electronic response of 
the detector. Neglecting the shot noise, this response equals 

NLo = ho[Gie-G2r\ (9) 

where I^o is the number of photons in the local oscillator pulse, t is the beam splitter trans- 
mittance, r is reflectivity and G'i_2 are the time integrated gains of the amplifiers associated 
with the two photodiodes. We assumed that the quantum efficiency of the photodiodes is 
1 and the signal is in the vacuum state. On the other hand, given that the variance in the 
number of photoelectrons in each photodiode due to the shot noise equals to the number of 
incident photons, we obtain the the output shot noise as 

{Ni^t) = ho[Gie + cyi (10) 

If the relative fluctuation of the LO power is \fXKl\^ jlj^o = fj the mean square fluctuation 



in the number of output photoelectrons in the units of shot noise is 391] 

y2Z2 



= /lo/ 5 with 6 = =. (11) 



For a well-balanced detector, ^ ^ 1/2 and Gi ~ 6*2. In this case, the above expression 
can be written as 5 ~ 5 opt + 5e«, where 5 opt = — r"^ is the imbalance of the optical 
beam splitter whereas 5ei = (Gi — G2)/{Gi + G2) is the electronic characteristic of the 
balanced detector related to its common- mode rejection ratio (CMRR). In what follows, it 
is convenient to discuss N^o in terms of generalized CMRR which is measured in decibels 
and defined as 

CMRR = -20 logio (25) • (12) 

The magnitude of Nlq can be estimated from the Taylor decomposition of the noise 
variance as a function of the local oscillator power. The shot noise variance is proportional 

'36] . We note that for determining 



to the LO level, whereas N^q depends on it quadratically 
Nloi only time- integrated response functions (over the bandwidth of the homodyne detector) 
of the photodetector-amplifier systems are relevant; Faster- varying differences in the time 
dependent shapes of these functions play no role. 



0.35 r 
0.3 - 




CMRR (dB) 

FIG. 3: GMCS QKD secure key rate per pulse as a function of the CMRR using the refined realistic 
model. Here, we assume 10^ LO photons/pulse and 1 % LO fluctuation. The simulation parameters 

n 

are from Ref. [i, Vk = 16.9, G = 0.758, rj = 0.44, ea = 0.056, N^ie = 0.045, and /3=0.898. In this 

simulation, Eoverlap = Nieak = 0. 

With the same GMCS QKD parameters used to produce Fig. |2l we simulate the GMCS 
QKD secure key rate as a function of the CMRR of the BHD in Fig. [3l When CMRR is 
lower than 55 dB (where key rate is 90 % of the maximum), key rate drops quickly as the 
CMRR drops. To obtain a positive key rate, the CMRR of the BHD should be greater than 
~ 44 dB. When CMRR is greater than 55 dB, the secure key rate will not improve too much 
by increasing the CMRR since other excess noise contribution {e a) is dominant. 

IV. CONSTRUCTION AND PERFORMANCE 

In this section, we will present our construction and test results of a high speed BHD in 
the telecommunication wavelength region. We will also predict the excess noise and secure 
key rate by using this BHD in a GMCS QKD experiment. 
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A. Schematic 



Figure H] (a) shows a schematic of our balanced homodyne detection system. In the 
telecommunication wavelength region, the signal and the LO beams will interfere at a two- 
by-two fiber coupler with a splitting ratio of 50:50. A variable optical attenuator and a 
variable optical delay are placed in the output paths of the fiber coupler, for adjusting losses 
and the lengths of the two paths accurately. Two photodiodes will detect the interference 
beams of the signal and the LO after precise balancing of time and intensity. Finally, a 
subtraction of the photocurrents generated by the two photodiodes is performed and the 
differential signal is amplified. To avoid disturbances from the environment, we used an 
enclosure to isolate the system of Fig. H] (a). 

In the electronic circuit shown in Fig. H] (b), two InGaAs photodiodes from Thorlabs 
(FGA04, 2 GHz bandwidth, quantum efficiencies: 90 % and 93%) are reversely biased. The 
differential signal is amplified by two OPA847 operational amplifiers. The whole BHD circuit 
is built on a custom-designed printed circuit board. To minimize the parasitic capacitance, 
two photodiodes with short electrical contact legs are placed very close to each other. 
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attenuator 



Signal anenuator 
Local coupler I 1 



Local coupler 
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voltage 
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FIG. 4: (a) Balanced homodyne detector (BHD) schematic in the telecommunication wavelength. 
The red lines are optical paths and the black lines are electrical cables, (b) Simplified BHD 
electronic circuit (the components in the right square of (a)). 
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B. Linearity 




Input photon number/pulse input photon number/pulse 
(a) ps pulse as a source (b) 50 ns pulse as a source 



FIG. 5: Photodiode linearity test. The peak photocurrent as a function of the input photon number 
in each pulse when (a) ~ 1 ps width laser as a source; (b) 50 ns width laser as a source 

In GMCS QKD, continuous Gaussian random numbers encoded on each pulse have to be 
recovered by the balanced homodyne detection on Bob's side. To ensure the BHD output is 
proportional to the electric field quadrature of each pulse, the linearity of the BHD has to 
be guaranteed. In practice, the photodiode and electronic amplifiers can both have nonlin- 
earities. A proper pulse width should be carefully chosen to guarantee that the photodiodes 
are working in their linear regions. In the test of the photodiode linearity, we send pulsed 
light to only one photodiode while blocking the other one. At a laser repetition rate of 10 
MHz, we measure the output photocurrent generated by the photodiode (before it goes to 
the electronic amplifiers) at different incident optical powers using an oscilloscope. In Fig. 
m we compare the output electrical pulse peak current when a laser source with (a) ~1 ps 
or (b) 50 ns pulse duration is used. We can see from Fig. |5] (a), the photodiodes saturate 
at a low optical input photon number per pulse than that of (b). In fact, the high peak 
power of the ~1 ps-pulse (~ 18 W) saturates the photodiodes. In the case of 50-ns pulse as 
a source (Fig. [5] (b)), photodiodes are working in their linear regions (4 % deviation) up to 
10^ photons/pulse. 

The linearity test of the electronic amplifiers is shown in Fig. [61 By sending positive or 
negative electrical pulses (50-ns width, 10 MHz repetition rate) to the electrical amplifiers 
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shown in Fig. |6] (a), we measure the output electrical pulse peak voltage as a function of 
the input electrical current. The trans- impedance gain is measured to be 22 kV/A in Fig. [6] 
(b). The trans- impedance gains for the positive and negative pulses are almost equal with 
less than 1 % deviation from their linear fits. 



OPA847 



Electrical signal ^OOOOh m 
input 




Output 



(a) 




FIG. 6: (a) Electronic amplifier linearity test circuit; (b) Output electrical pulse peak voltage as a 
function of input electrical current. 



C. BHD bandwidth 

We first characterize the bandwidth of our BHD by sending a CW LO. In this case, the 
residual signal caused by different temporal responses of the photodiodes can be eliminated 
by adjusting the loss in one arm (Fig. |l]a). Using an RF spectrum analyzer, the spectral 
noise is measured and shown in Fig. [71 In the frequency domain, the trace (a) is the 
electronic noise and is measured when no optical signal is sent to the BHD. We can see the 
3-dB bandwidth of the BHD is 104 MHz. Trace (b) is measured when 6.64 mW CW LO is 
sent to the BHD. The noise includes electronic noise and shot noise. 
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D. Homodyne detector noise measurement in the time domain 



In GMCS QKD, each pulse will be measured individually. In the time domain, we first 
performed HD noise measurement at a pulse repetition rate of 10 MHz and obtained 12 dB 
shot noise to electronic noise ratio at an LO photon level of 8.2 xlO^. We further increase 
the repetition rate to 32 MHz and will demonstrate our results here. 

With a 16-ns-width pulsed LO (5-ns edge time) at a repetition rate of 32 MHz, the total 
noise of BHD of each pulse is obtained by integrating the BHD output voltage over the pulse 
region. With an oscilloscope sampling rate of 20 G samples/s, and an integration time win- 
dow of 20 ns in each cycle, each pulse quadrature is obtained from 400 sample points. Noise 
variance is obtained from 640 pulses. Fig. [S] shows the BHD noise variance as a function of 
the LO photon number per pulse. The measured homodyne detector noise includes: (1) elec- 
tronics noise N^ie, (2) shot noise, and (3) noise associated with LO fluctuation N^o- Because 
Fig. [8] displays the square variance, the shot noise should appear linear to the LO level, and 
NlO) which is linear to LO level in shot-noise units becomes quadratically dependent on LO 
level when plotted in units. Note that Soveriap is neglected since it is much less than the 
shot noise when the signal is vacuum. We distinguish noises by separating the quadratic 
LO-dependent (Nlq), the linear LO-dependent (shot noise) and LO-independent (A^^e^e) com- 
ponents of the BHD output signal. From the experimental results, the total variance of the 
BHD output signal (in V^)can be written as y = 8.0 x lO'^o ■ J^^ + 7.0 x 10"^° ■ ho + 0.028 
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7: (a) Electronic noise (b) BHD noise at an LO of 6.44 mW. 
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where Ilo is the LO photon number per pulse. The coefficient of determination is 0.999 



43|. The electronic noise Neie (in shot noise unit) can be determined from the ratio of the 



third term and the second term, which is 4.0xl0^//2,o- We find the shot noise to electronic 
noise ratio is 13 dB at an LO photon level of 8.5 x 10^ per pulse. In the meantime, N^q 
(in shot noise unit) can be determined from the ratio of the ffist term to the second term, 
which is 1.1 X 10~^° x Ilq- 




10 10 

LO photons/pulse 



10 



FIG. 8: Total noise of BHD as a function of the LO photon number per pulse. 



As a simple check of the randomness of the noise, we measure the correlation coefficient 
(CC) between adjacent sampling results. CC is defined as 

E{X{n)X{n + 1)) - E{X{n))E{X{n + 1)) 



CC 



(13) 



^E{X{nY) - E^{X{n))^E{X{n + 1)2) - E^{X{n + 1)) 

while X{n) is the quadrature value of the nth pulse. At 3.4x10^ LO photons/pulse, the 
correlation coefficient between consecutive pulses is 0.051, which is comparable with other 



BHDs reported in Ref. 



4l| (0.04) and ReL [4^ (0.07). We can use the CC to determine 



the upper bound of the excess noise caused by electrical pulse overlap e overlap- In GMCS 
QKD, with the quadrature variance of the coherent state prepared by Alice V, the excess 
noise due to the overlap between pulses will be V" x CC^ = (Va + 1) x CC^ (referring to the 
input) 44|. Assuming Alice's modulation Va = 16.9 {g] and each pulse has two neighboring 
pulses, we derive the excess noise caused by BHD pulse overlap to be 0.044 referring to the 
input. 
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E. Common mode rejection ratio 



To quantify the subtraction capability of the BHD, we measure the CMRR. In the fre- 
quency domain, we obtain CMRR by measuring the spectral power difference at the repeti- 
tion rate of 32 MHz in two cases: (a) one photodiode is blocked and the other is illuminated 
(b) both photodiodes are illuminated. At an LO power of 24.6 /iW, the spectral noise for 
both cases is shown in Fig. [91 The CMRR is obtained to be 46.0 dB. 
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FIG. 9: Noise spectrum at an LO power of 24.6 /iW when (a)two photodiodes are illuminated; 
(b)one photodiode is blocked. Resolution bandwidth: 100 kHz 



F. Excess noise evaluation and key rate simulation for a GMCS QKD experiment 

Under this refined realistic model, we identify new excess noise sources of a practical 
BHD. Various sources of excess noise contributed by this BHD are summarized in Table [B 
Given this practical BHD, we can also optimize operation parameters based on the refined 
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realistic model. In Fig. [TOl we simulate the key rate per pulse as a function of the LO level. 
The key rate under the refined realistic model will reach the maximum at an LO photon 
number of 1.3 x 10^ per pulse, because there is a tradeoff between N^q (increasing with LO 
level) and N^ie (decreasing with LO level). 




3 4 5 

LO photons/pulse 



X 10 



FIG. 10: Optimization of LO photon number under the refined realistic model. The simulation 
parameters are from Table |T] and Ref. [S], G = 0.758, Va = 16.9, r] = 0.44, ea = 0.056, and 
^=0.898. 



In Fig. [m we simulate the secure key rate of GMCS QKD using this BHD under the 
refined realistic model by choosing the optimal LO level for each transmittance. With this 
high speed BHD allowing a repetition rate of tens of MHz, the secure key generation rate of 
GMCS QKD can be improved b y 1 -2 orders of magnitude comparing to current systems at 



500 kHz repetition rate in Ref. 



15| (with a key rate of 2 kbits/s over 25 km fiber), and in 



TABLE I: Excess noise contributions by the BHD (in the shot noise unit). Ilo indicates the LO 
photon number per pulse. 

Referring to the input Referring to the output 
Neie 4.0 X lOy {riGho) 4.0 x IOV/lo 

£overlap 0.044 0.044 XT?^ 

Nlo LI X 10-10 • lLo/r]G 1.1 x 10-1° • ho 
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Ref. 22| (with a key rate of 8 kbits/s over 3 dB loss channel) and at 100 kHz in Ref. 21| 
(with a key rate of 5 kbits/s over 20 km fiber). From the key rate simulation in Fig. [TTl 
we expect to achieve a few Mbits/s over a short distance in future GMCS QKD under the 
refined realistic model. 




10 

Distance (km) 



20 



FIG. 11: QKD secure key rate under the refined realistic model as a function of the transmission 
distance when the repetition rate is 32 MHz based on the performance of our BHD. The simulation 
parameters are from Table |I] and Ref. a], Va = 16.9, rj = 0.44, ea = 0.056, and /3=0.898. Fiber 
loss is 0.21 dB/km. For each distance, the LO level is chosen to maximize the secure key rate. No 
secure key rate can be generated beyond 20 km due to the excess noise. 



V. CONCLUSION 

In conclusion, we have analyzed the excess noise contributed by a practical BHD and 
refined the realistic model. The electronic noise N^ie-, excess noise due to electrical pulse 
overlap Soveriap and excess noise caused by LO fluctuations in the presence of incomplete 
subtraction Nlq are three excess noise sources for a practical BHD. They introduce a secu- 
rity loophole since Eve can monitor the pulse width and slightly change the LO intensity. 
Implementing attacks with current technology to GMCS QKD will be an interesting research 
direction to explore. 

We also developed a high speed BHD with a 104 MHz bandwidth in the telecommu- 
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nication wavelength region for the first time. A comparison of the specifications between 
our BHD and other high speed BHD is shown in Table [Tll We achieved a shot-noise-to- 
electronic-noise ratio of 13 dB in the time domain at a pulse repetition rate of 32 MHz. 
The BHD has a high CMRR of 46.0 dB. Various sources of excess noise introduced by this 
practical BHD are identified, and their contributions to excess noise are evaluated. With 
this BHD, the key generation rate of GMCS QKD experiments is expected to reach a few 
Mbits/s under the refined realistic model. 
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